auth/auth-batch/src/main/java/org/onap/aaf/auth/batch/actions/RoleModify.java

   1 /**
   2  * ============LICENSE_START====================================================
   3  * org.onap.aaf
   4  * ===========================================================================
   5  * Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
   6  * ===========================================================================
   7  * Licensed under the Apache License, Version 2.0 (the "License");
   8  * you may not use this file except in compliance with the License.
   9  * You may obtain a copy of the License at
  10  *
  11  *      http://www.apache.org/licenses/LICENSE-2.0
  12  *
  13  * Unless required by applicable law or agreed to in writing, software
  14  * distributed under the License is distributed on an "AS IS" BASIS,
  15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * See the License for the specific language governing permissions and
  17  * limitations under the License.
  18  * ============LICENSE_END====================================================
  19  *
  20  */
  21
  22 package org.onap.aaf.auth.batch.actions;
  23
  24 import java.io.IOException;
  25 import java.util.List;
  26
  27 import org.onap.aaf.auth.batch.helpers.Perm;
  28 import org.onap.aaf.auth.batch.helpers.Role;
  29 import org.onap.aaf.auth.dao.cass.PermDAO;
  30 import org.onap.aaf.auth.dao.cass.RoleDAO;
  31 import org.onap.aaf.auth.dao.cass.Status;
  32 import org.onap.aaf.auth.dao.cass.RoleDAO.Data;
  33 import org.onap.aaf.auth.env.AuthzTrans;
  34 import org.onap.aaf.auth.layer.Result;
  35 import org.onap.aaf.misc.env.APIException;
  36
  37 import com.datastax.driver.core.Cluster;
  38
  39 public class RoleModify extends ActionDAO<Role,RoleDAO.Data,RoleModify.Modify> {
  40     public RoleModify(AuthzTrans trans, Cluster cluster, boolean dryRun) throws APIException, IOException {
  41         super(trans, cluster, dryRun);
  42     }
  43
  44     public RoleModify(AuthzTrans trans, ActionDAO<?,?,?> adao) {
  45         super(trans, adao);
  46     }
  47
  48     @Override
  49     public Result<RoleDAO.Data> exec(final AuthzTrans trans, final Role r,final RoleModify.Modify modify) {
  50         Result<List<Data>> rr = q.roleDAO.read(trans, r.ns,r.name);
  51         if (dryRun) {
  52             if (rr.isOKhasData()) {
  53                 return Result.ok(rr.value.get(0));
  54             } else {
  55                 return Result.err(Result.ERR_NotFound, "Data not Found " + r.toString());
  56             }
  57         } else {
  58             Result<Data> rv = null;
  59             if (rr.isOKhasData()) {
  60                 for (final Data d : rr.value) {
  61                     modify.change(d);
  62                     if (d.ns.equals(r.ns) && d.name.equals(r.name)) {
  63                         // update for fields
  64                         // In either case, adjust Roles
  65                         for (String p : d.perms) {
  66                             if (!r.perms.contains(p)) {
  67                                 Result<PermDAO.Data> rpdd = PermDAO.Data.decode(trans, q, p);
  68                                 if (rpdd.isOKhasData()) {
  69                                     q.roleDAO.dao().addPerm(trans, d, rpdd.value);
  70                                 }
  71                             }
  72                         }
  73                         for (String p : r.perms) {
  74                             if (!d.perms.contains(p)) {
  75                                 Result<PermDAO.Data> rpdd = PermDAO.Data.decode(trans, q, p);
  76                                 if (rpdd.isOKhasData()) {
  77                                     q.roleDAO.dao().delPerm(trans, d, rpdd.value);
  78                                 }
  79                             }
  80                         }
  81                         rv = Result.ok(d);
  82                     } else {
  83                         for (String p : d.perms) {
  84                             Perm perm = Perm.keys.get(p);
  85                             if (perm!=null) {
  86                                 if (perm.roles.contains(r.encode())) {
  87                                     modify.permModify().exec(trans, perm, new PermModify.Modify() {
  88                                         @Override
  89                                         public RoleModify roleModify() {
  90                                             return RoleModify.this;
  91                                         }
  92
  93                                         @Override
  94                                         public void change(PermDAO.Data pdd) {
  95                                             pdd.roles.remove(r.encode());
  96                                             pdd.roles.add(d.encode());
  97                                         }
  98                                     });
  99                                 }
 100                             }
 101                         }
 102                         Result<List<Data>> preexist = q.roleDAO.read(trans, d);
 103                         if (preexist.isOKhasData()) {
 104                             Data rdd = preexist.value.get(0);
 105                             for (String p : d.perms) {
 106                                 Result<PermDAO.Data> perm = PermDAO.Data.decode(trans, q, p);
 107                                 if (perm.isOKhasData()) {
 108                                     q.roleDAO.dao().addPerm(trans,rdd, perm.value);
 109                                 }
 110                             }
 111                             rv = Result.ok(rdd);
 112                         } else {
 113                             rv = q.roleDAO.create(trans, d);
 114                         }
 115                         if (rv.isOK()) {
 116                             trans.info().printf("Updating %s|%s to %s|%s", r.ns, r.name, d.ns, d.name);
 117                             RoleDAO.Data rmme = new RoleDAO.Data();
 118                             rmme.ns=r.ns;
 119                             rmme.name=r.name;
 120                             q.roleDAO.delete(trans, rmme, false);
 121
 122                         } else {
 123                             trans.info().log(rv.errorString());
 124                         }
 125                     }
 126                 }
 127             } else {
 128                 rv = Result.err(rr);
 129             }
 130             if (rv==null) {
 131                 rv = Result.err(Status.ERR_General,"Never get to this code");
 132             }
 133             return rv;
 134         }
 135     }
 136
 137     public static interface Modify {
 138         void change(RoleDAO.Data ur);
 139         PermModify permModify();
 140     }
 141
 142     public Result<Void> delete(AuthzTrans trans, Role r) {
 143         if (dryRun) {
 144             return Result.ok();
 145         } else {
 146             RoleDAO.Data data = new RoleDAO.Data();
 147             data.ns=r.ns;
 148             data.name = r.name;
 149             return q.roleDAO.delete(trans,data,false);
 150         }
 151     }
 152 }